d2454e27fc
gitea: update to version 1.12.3
2020-07-29 07:35:10 +02:00
6a9c4aedae
gitea: implement fetching binary
2020-06-23 16:32:00 +02:00
22372c931d
Update role acertmgr add var acertmgr_version
...
Defining variable acertmgr_version from role defaults, allows version
string to be overridden. Role defaults are set in connection: local scope.
This also shortens long line to make this role linter compliant
2020-06-22 13:27:26 +02:00
a42b34b3ec
nginx: don't use "== True"
2020-06-20 17:22:23 +02:00
47cccdd42a
cleanup: use systemd module for daemon-reloaed
2020-06-20 14:51:13 +02:00
40e8445679
matrix: increase file size limit
2020-06-20 00:20:48 +02:00
fe10cde96b
acertmgr: ansible style fix
2020-06-20 00:20:19 +02:00
080c3fb495
drone-runner: fix another syntax error
2020-06-20 00:10:46 +02:00
d0d3fe230a
drone-runner: set password, fix syntax error
2020-06-20 00:07:46 +02:00
84de43d428
gitea: disable gravatar, less log spam, persistent sessions
2020-06-19 23:42:22 +02:00
d612d1ac28
nginx: enable gzip for proxied responses
2020-06-19 23:41:50 +02:00
a065fd4bc8
drone: install runner onto bob
2020-06-19 23:41:16 +02:00
fe5bdab253
drone: move onto gitea server and adjust for gitea
2020-06-19 23:39:58 +02:00
c2b529345e
nginx: hide version
2020-06-18 22:39:30 +02:00
488fb29275
gitea: migrate from gogs
2020-06-18 22:34:30 +02:00
7a58869a2f
fix path of acertmgr handler
2020-06-07 15:16:49 +02:00
86bf87405a
new host for drone.io
...
fix path of acertmgr handler
2020-06-07 15:16:25 +02:00
9bb3111efc
matrix: rebase config against 1.14.0
2020-05-30 14:47:22 +02:00
8e5ccda050
prometheus: basic proxmox monitoring
2020-05-25 16:15:29 +02:00
5a2b3559db
jitsi: new role (on host zirconium.binary-kitchen.net)
2020-05-20 09:57:18 +02:00
dcadf88ada
mail: cleanup
2020-05-20 08:37:09 +02:00
3f920c731d
mail: don't apply logrotate settings
2020-05-20 08:36:25 +02:00
d96e3f20ec
mail: fix sieve path name and permissions
2020-05-20 08:35:44 +02:00
5067e5371e
mail: move vault mapping to group_vars
2020-05-20 08:34:22 +02:00
0790c0b737
acertmgr: cleanup
2020-05-18 19:49:59 +02:00
fb215fdd82
mail: make mail_trusted an array
2020-05-18 19:10:32 +02:00
9d6ed20d9f
librenms: update dependencies
2020-05-11 17:42:07 +02:00
35fda6124a
dns-intern: openvpn -> wireguard
2020-05-11 16:16:07 +02:00
088ee7c6bf
matrix: increase max size to 10M
2020-04-09 21:38:29 +02:00
11bd9019d9
matrix: update config and set max_body_size
2020-03-29 11:48:38 +02:00
453537697d
coturn: new role for a TURN server to be used with matrix
2020-03-16 20:18:59 +01:00
a04c216abe
acertmgr: Use latest package from github instead of git checkout
2020-02-17 20:44:21 +01:00
Kishi85
fd04a750a5
Add excludes to logrotate.d config and update to correct paths
2020-02-04 18:35:09 +01:00
Kishi85
4a11950728
Update logrotate configs to preserve last 7 days
2020-02-03 19:37:43 +01:00
786ecd554f
slapd: use root password from vault
2020-02-03 19:08:09 +01:00
3e27ad3bde
dhcpd: use new secret omapi key
2020-02-03 18:38:01 +01:00
f184ca15fe
common: limit syslog retention to 7 days
2020-02-02 20:57:28 +01:00
d97524798b
bk-dss: use ldap_uri instead of ldap_host
2020-01-31 19:55:15 +01:00
66d6af74f0
matrix: reduce logging
2020-01-30 16:31:04 +01:00
1029f41bdc
dhcp: replace ap05 mac addr
2020-01-27 20:35:45 +01:00
611a14fffb
common: set journald retention time to 7days
2020-01-27 20:35:23 +01:00
8a25f21a87
matrix: rebase homeserver.yaml against 1.9.0
2020-01-27 15:28:49 +01:00
9ff516e089
matrix: set proper collation/ctype for DB
2020-01-22 13:12:21 +01:00
84189d95a1
matrix: default name to username
2020-01-20 20:49:00 +01:00
6b82d3d92b
new host: sodium (matrix) and new role matrix
2020-01-20 15:56:29 +01:00
7950c96da2
grafana: new role
2020-01-08 12:08:06 +01:00
f23d71aa6a
new host: strontium (Rocket.Chat)
2020-01-08 12:03:28 +01:00
871add3b0e
dns/dhcp: add ap05 for testing
2019-11-30 22:12:25 +01:00
3ab962ba4d
web: add binary.kitchen to vhost config
2019-11-30 22:11:40 +01:00
ef9e4352d3
slapd: add openssh public key schema
2019-11-28 22:40:51 +01:00
7acbf3d066
web: add more domains to certificates
2019-11-15 16:31:07 +01:00
a4e32cb79b
bk-dss: update to 0.8.4
2019-11-07 22:32:54 +01:00
909c9ebca6
new host: fusilli
2019-10-31 19:43:26 +01:00
91d95b190c
dns-intern: use future-proof pdns config
2019-10-14 18:34:43 +02:00
986392237c
uau: install more updates
2019-10-14 08:15:37 +02:00
b2f56c709b
common: install ipmitool on Proxmox hosts
2019-10-09 21:08:48 +02:00
a86081d6d7
acertmgr: update to version 1.0.0
2019-10-01 08:05:32 +02:00
25fca48dc8
new alias: 3dprinter
2019-09-30 18:50:41 +02:00
411243aeef
new host: noodlehub
2019-09-30 18:44:44 +02:00
133838e586
radius: fix symlinks that break with debian buster
2019-09-23 18:47:23 +02:00
a3675c0cc8
hackmd: new upstream URL and version 1.5.0
2019-09-18 13:08:08 +02:00
fbe1ac33c3
mail: cleanup
2019-09-17 13:29:59 +02:00
e0cbf2b760
common: remove snmpd
2019-09-17 10:16:05 +02:00
939b9ccb4c
partdb: update to debian buster / PHP 7.3
2019-09-17 08:51:03 +02:00
e31abbb8bb
web: switch to PHP 7.3
2019-09-12 13:34:05 +02:00
772df6c630
common: also clear motd on Proxmox hosts
2019-09-12 13:22:19 +02:00
bd06590301
nginx: enable TLSv1.3 (relevant VMs have buster)
2019-09-12 13:09:52 +02:00
fb81c5ce02
common: remove snmp, add acpid (on VMs)
2019-09-12 12:00:59 +02:00
ef7177f0ec
common: set vm.swappiness on Proxmox hosts
2019-09-10 19:14:55 +02:00
3d1a681850
librenms: debian buster
2019-09-09 19:33:47 +02:00
a6a973c034
prosody: make it work with buster
2019-09-09 19:09:44 +02:00
8a2ade46cb
Remove host apfelkuchen
2019-09-07 20:45:11 +02:00
c763264ccd
hackmd: update and fix uploads folder link creation
2019-09-06 16:17:34 +02:00
4c7d472f2f
remove racktables and partially remove snmpd
2019-09-03 13:13:03 +02:00
Kishi85
6945b4918c
mail: Enable subject privacy for the history module
2019-09-03 11:50:08 +02:00
6e593d0feb
gogs: switch to debian buster
2019-08-30 11:20:40 +02:00
Kishi85
6ce23ca253
mail: disable rspamd actions for mail from localhost
2019-07-24 10:11:38 +02:00
Kishi85
83afecfd72
mail: use srs only for forwards and MDA, not for incoming mails
2019-07-24 09:38:01 +02:00
Kishi85
5faf9de93e
mail: fix redis config
2019-07-23 17:23:14 +02:00
Kishi85
5df4457b0e
mail: add postsrsd to stop breaking forwards for SPF domains
2019-07-23 16:06:16 +02:00
43f1633a22
cleanup roles
2019-07-23 12:00:59 +02:00
Kishi85
2153438ec5
mail: allow any sender from our internal networks
2019-07-23 11:29:34 +02:00
85c2a90431
bk-dss: enable admin menu for zaesa
2019-07-22 13:18:46 +02:00
Kishi85
884bbbfbae
mail: use rspamd with automatic learning using sieve + managesieve
2019-07-16 09:37:50 +02:00
4b1952a6e0
uau: minimize diff to default config
2019-07-10 18:43:08 +02:00
5ead59ce14
acertmgr: update to version 0.9.8
2019-07-09 12:39:31 +02:00
f1dec82592
prometheus: only support Debian buster
2019-07-09 12:38:32 +02:00
909e767b36
dhcp/dns: add new hosts and IP ranges
2019-06-27 10:09:39 +02:00
2a417cdee2
acertmgr: update to version 0.9.7
2019-06-18 15:13:05 +02:00
f8daa11de1
nextcloud: first step towards handling php from ansible again
2019-05-20 21:35:58 +02:00
477441585d
owncloud: rename to nextcloud
2019-05-20 20:55:50 +02:00
7f689e1a82
owncloud: rename to nextcloud
2019-05-20 20:55:05 +02:00
06dcb1b082
mail: fix SSL CA settings
2019-05-20 20:09:07 +02:00
4ee7c6ad16
acertmgr: migrate from legacy paths
2019-05-20 19:49:08 +02:00
17f25f2c32
acertmgr: migrate from legacy paths
2019-05-20 19:38:32 +02:00
b6f0b9417d
bk-dss: update to version 0.8.3
2019-05-17 08:29:40 +02:00
8a33cdc4ad
slapd: fix ACLs
2019-05-17 08:25:14 +02:00
b4f95eefc8
bk-dss: fix typo
2019-05-16 15:52:49 +02:00
e99c8d34dd
pvessl: nginx based reverse proxy w/ certs for PVE
2019-05-13 21:46:37 +02:00
c4bcc13ccd
slapd: simplify ACL
2019-05-13 21:45:37 +02:00
45917de310
bk-dss: add new admin
2019-05-13 21:44:27 +02:00
Kishi85
cc7d959435
mail: dovecot verify password by binding to ldap
2019-05-13 21:30:13 +02:00
2abc3819ac
acme-dnskey-generate: handle empty san list
2019-05-13 21:00:50 +02:00
e5ca7f59db
replace hard coded values by variables
2019-05-13 20:22:02 +02:00
00826a8d14
slapd: implement proper ACL
2019-05-13 20:03:20 +02:00
6fec0e62bc
mail: fix aliases
2019-04-23 08:07:35 +02:00
9f3923f494
acertmgr: update to 0.9.5
2019-04-01 18:51:01 +02:00
ad2e2dca6b
dns-intern: move cannelloni to user vlan, add tmp
2019-04-01 18:35:27 +02:00
5c07927012
Remove BKCA for good
2019-03-25 21:08:23 +01:00
50cab2429d
raduis: use LE certificate via dns
2019-03-25 21:08:19 +01:00
c6c91d7256
Migrate LDAP from BKCA to Let's Encrypt
2019-03-25 19:58:06 +01:00
c0070e042b
acertmgr: update to 0.9.4
2019-03-25 19:25:56 +01:00
606851de76
slapd: use LE certificate via dns
2019-03-25 19:05:31 +01:00
3471c0ca34
bk-dss: update to 0.8.2
2019-03-22 13:09:58 +01:00
e72ee8fb74
acertmgr: update to 0.8.2
2019-03-21 22:33:05 +01:00
218ae6c4dd
bk-dss: restart uwsgi on changes ( fixes #28 )
2019-03-18 22:18:43 +01:00
cefabcaa7f
web: no longer server binary-kitchen.space
2019-03-09 18:39:27 +01:00
654c2c0122
cleanup whitespace
2019-03-09 18:38:07 +01:00
e7375cac3e
new host: mpcnc
2019-03-09 18:33:00 +01:00
97cb51efbf
hackmd: increase max upload size
2019-03-07 21:17:19 +01:00
e1e110e704
acertmgr: update to 0.8.1
2019-03-07 15:01:06 +01:00
56df920ec0
bk-dss: update to 0.8.1
2019-02-28 11:17:08 +01:00
7fb5ac8875
acertmgr: fix typo
2019-02-25 18:10:56 +01:00
476df56fcc
acertmgr: rename vars, introduce version
2019-02-25 08:34:21 +01:00
a2e6267ec8
slapd: use base from variables
2019-02-23 23:55:35 +01:00
9bffa36a33
acertmgr: rename from certmgr, run on config change
2019-02-23 23:54:24 +01:00
407409010e
bk-dss: use vault for secret, use tagged version, use correct certificate for ldap
2019-02-23 23:34:23 +01:00
845a9f3c76
dss: remove unused role (replaced by bk-dss)
2019-02-19 09:31:33 +01:00
905f86f2df
gogs: apt repo key location has changed
2019-02-18 19:15:34 +01:00
f576ebe615
common: forgot to remove gentoo prompt from Debian
2019-02-18 18:39:12 +01:00
d5c98eb13c
common: don't use gentoo prompt anymore
2019-02-18 18:35:54 +01:00
41784f514f
Cleanup whitespace
2019-02-13 16:01:32 +01:00
b47be3287a
librenms & racktables: use LE certificates
2019-02-13 15:57:46 +01:00
766ece5b10
acme-dnskey-generate: fix naming inconsistencies
2019-02-13 15:40:12 +01:00
275b9a6071
Cleanup whitespace
2019-02-13 14:28:16 +01:00
cffa318bea
Remove acme.sh client
2019-02-13 14:05:27 +01:00
82b5f9cdf3
dns-intern: sync A/PTR, use RR for radius, fix erx-rz loopback
2019-02-13 13:38:08 +01:00
82181c2eb2
Remove forseti/checkmk
2019-02-13 13:30:16 +01:00
d52b5c0b76
bk-dss: update to current version
2019-02-12 09:45:10 +01:00
fa7fec4a93
certmgr: update to latest version, adjust config
2019-02-11 19:36:35 +01:00
Kishi85
06760bf9f7
Add role to generate dns keys for acme/cermgr
2019-02-11 18:38:41 +01:00
40efa84fcf
dovecot: add logrotate config
2019-02-04 20:31:13 +01:00
8b0be8cc6f
dns: host ffrgb (offloader)
2019-02-04 18:33:06 +01:00
7b53f00a5e
new hosts: maccaroni & spaghetti
2019-01-20 14:47:55 +01:00
Kishi85
3425fdeac9
new host: magnesium (partdb/partkeepr)
2018-12-17 19:25:15 +01:00
5fae8fa02c
dns-intern: update loopback addresses
2018-10-30 12:31:34 +01:00
543ffce274
dhcpd: dhcp for Aruba APs
2018-10-26 18:43:18 +02:00
2f1ed864cd
dns-extern: update documentation
2018-10-22 21:03:18 +02:00
ae65e438dc
dns-extern: role for primary nameserver
2018-10-22 20:58:34 +02:00
Kishi85
e3c7c0cc1b
Change updatepolicy.aliases format
2018-10-22 20:30:12 +02:00
267557f068
common: install software on proxmox
2018-10-15 21:47:26 +02:00
65786edf03
common: run apt task to ensure python-apt is installed
2018-10-15 21:47:03 +02:00
e88a6e5691
further updates wrt changed ntp server
2018-10-15 21:46:30 +02:00
Kishi85
271305ad34
Proxmox handling
2018-10-15 21:08:06 +02:00
67d4340ba6
hackmd: fix owner, persistent upload path, allow anon edits
2018-10-15 18:46:34 +02:00
22c1b0d469
bk-dss: new role to be deployed on LDAP host
2018-10-15 18:25:30 +02:00
32f976a163
hackmd: fix when
2018-10-08 21:46:29 +02:00
4a93fab603
hackmd: update database scheme
2018-10-08 20:29:18 +02:00
9b19d93bf9
hackmd: update version to codimd 1.2.1
2018-10-08 20:28:06 +02:00
ebecd957b2
hackmd: reload systemd before restarting hackmd
2018-10-08 20:14:33 +02:00
e2fd44eb53
prometheus: new role
2018-10-06 22:19:37 +02:00
634b952321
common: update zsh path for FreeBSDH
2018-10-06 22:18:40 +02:00
b6605467fa
dhcpd: new lock IP
2018-10-06 20:37:41 +02:00
1b25547d97
dns: remove old hosts
2018-10-04 21:38:59 +02:00
ca86d25ed5
Fix dovecot ldaps
2018-10-04 21:29:16 +02:00
59cca157e2
web: new domain makerspace-regensburg.de
2018-10-02 18:35:30 +02:00
d434e9e70d
hackmd: only rebuild if changed (properly this time)
2018-09-20 22:57:51 +02:00
9e0e5923a8
dns-intern: renumber RZ
2018-09-20 22:31:12 +02:00
482d67ebb1
Change BKCA to a system CA for migration to Let's Encrypt
2018-09-20 18:55:17 +02:00
1a511a9faf
root-keys: new role to set ssh authorized keys for the root user
2018-09-17 22:03:35 +02:00
0a2f85459d
common: update FreeBSD zsh location
2018-09-16 11:50:45 +02:00
3be1e06242
hackmd: disable anon usage
2018-09-16 11:49:53 +02:00
9f608c886d
Change certificate locations, update powerdns aliases
2018-09-11 13:58:24 +02:00
9dcdbdf983
acme.sh role
2018-09-10 22:52:41 +02:00
b3d3888518
dchpd: don't use global ntp servers
2018-08-27 23:31:29 +02:00
d571ff6827
dns-intern: new hosts
2018-08-27 23:30:49 +02:00
6a73265d79
dhcp: increase lease times
2018-08-21 12:59:41 +02:00
8d7d6f6765
dns-intern: fix typo in hostname
2018-08-21 12:59:22 +02:00
008f64cb08
dns-intern: new host sw03
2018-08-20 15:46:09 +02:00
6c7014e7fc
Set sane default for DMARC_MODERATION_ACTION
2018-07-30 21:32:09 +02:00
9baad14c37
Remove, rename and preserve DKIM headers (mode=3)
2018-07-24 12:21:57 +02:00
74aa02420e
mail: make mailman work with postfix again
2018-07-23 22:36:54 +02:00
6db9b2eafd
dns-intern: new hosts (ap04 and modem)
2018-07-23 21:54:27 +02:00
ede83b43a1
Mailman: Remove (wrong) DKIM headers
2018-07-23 18:47:56 +02:00
bfe0d994d0
common: fix regex
2018-07-17 13:26:45 +02:00
b456e13542
radius: update to freeradius 3 (and no more LDAP)
2018-07-17 10:43:31 +02:00
4204334e3d
Clean cmk server
2018-07-16 21:03:25 +02:00
ff98616d94
new agent ver
2018-07-16 21:02:50 +02:00
2876acf4d6
Check_MK for bacon, new cmk version
2018-07-16 20:52:33 +02:00
e4b07bc43b
dns/dhcp: reserved host mirror
2018-07-08 16:38:16 +02:00
4aa681ff70
common: udpate zsh prompt path
2018-07-06 12:12:29 +02:00
26ed972c00
Check_MK update p33 to p34
2018-06-27 21:09:12 +02:00
66bdb9ec16
dns-intern: style fix
2018-06-27 20:27:00 +02:00
66c36c4896
common: fix network interfaces names
...
(ensXX -> ethX) in consistent way with systems upgraded
from debian 8
2018-06-27 20:04:45 +02:00
0622787e0c
new host: neon, rename dns to dns-intern
2018-06-27 19:35:30 +02:00
8ae92ce745
Add alias for forseti, checkmk.bk
2018-06-13 17:29:37 +02:00
69edc1d5bf
Downloaded file mode 0755 -> 0644
2018-06-13 16:56:19 +02:00
a025bc0301
Merge branch 'master' of git.binary-kitchen.de:moepman/infra
2018-06-13 16:48:27 +02:00
b5b06841d1
Add check_mk tasks and roles
2018-06-13 16:47:18 +02:00
0cafa543aa
run unattented updates on non-critial hosts
2018-06-13 15:08:04 +02:00
